CVE-2015-7840

概要

参考情報

• solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm · Vendor Advisory
• security.gentoo.org/glsa/201603-11

log and event manager のその他の脆弱性

• CVE-2017-5199高 8.8The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /us…
• CVE-2017-5198高 8.8SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/l…
• CVE-2014-5504高 7.5SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the da…